TLPEView partially imitate wjr's PEView

Started by TimoVJL, July 12, 2017, 09:21:37 PM

Previous topic - Next topic

TimoVJL

Project freezed.
TLPEView only partially imitate wjr's PEView program that support only x86.
A lot of bugs and quite slow, but was made for x86/x64 exe/dll.

EDIT 2017-08-16: first version with primitive plugin support. a28. Binaries only.
                           Plugin name mask "TLPEPl*.dll". Save sample attached.

EDIT 2017-08-26: one useless exe check for possible a DOS exe removed. a29.
EDIT 2017-08-27: fix symbol table crash. a30.
EDIT 2017-10-13: fix DllCharacteristic. a31.
EDIT 2018-02-12: fix symbol table section name a32.
EDIT 2018-05-31: show file or view offset. a33.
EDIT 2018-07-08: list debug types. a34
EDIT 2018-08-06: fix for import hints/names and empty section. a35

EDIT 2019-03-30: UNICODE a43 objs, IMAGE_FILE_MACHINE_UNKNOWN
EDIT 2019-04-13: UNICODE a44 fix export table forwards.
EDIT 2019-04-15: UNICODE a45 changes in menu handling and listview header for clipboard
EDIT 2019-06-26: UNICODE a46 export name buffer overflow

EDIT: Plugins:
Plugins must be in same folder as TLPEView.
With a good luck plugins are listed in TreeView node context menu with mouse right click.

Another site masm32 for downloads.
May the source be with you

Grincheux


frankie

"It is better to be hated for what you are than to be loved for what you are not." - Andre Gide

jj2007


Grincheux

Quotesome fixes and without crt as Avast don't like it.

Uninstall Avast it does not detect anything! :P

Grincheux

For me it is perfect, the program is very very fast. :D
Suggestions :
Display ressources as text,
Create RC file
Export code section

This program could be a good tool for preparing disassembly.

Very good work.

jj2007

New version tested on my library, works great. Compliments, Timo!

Vortex

Hi Timo,

Nice job. I am testing your tool. Thanks for your work.
Code it... That's all...

frankie

Good job   :D
Maybe a 64bits version of tools is redundant.
Development tools are generally just 32bits because can run on both systems while producing both outputs...  ;)
"It is better to be hated for what you are than to be loved for what you are not." - Andre Gide

Vortex

Hi Timo,

Thanks again for the great work. I will let you know if I find issues.
Code it... That's all...

TimoVJL

I am thankful for Vortex, as he have pointed me a lot about of errors.
I hope this program is helpful users who want to check x64 PE files.
When basic program is stable, then it is time to think features and possible an/a add-in/plugin feature .
For x86 users PEView is a good/better option.
The public development depends on interest of users. (shall i just develop this for myself ;))
May the source be with you

jack

I too use PEviewers mainly to view the exported and imported functions in dll's but also some times I just want to know whether an exe is 32 or 64-bit

Vortex

Hi Timo,

Many thanks for your nice work. You should maintain the tool for all the forum audience. I see a big potential in your application.  With TLPEView, it's easy to study the internals of MS COFF object modules : For example, one can code a MS COFF object file processor to extract the data or code section for special purposes. I will let you know about the details.
Code it... That's all...

jack

hello TimoVJL
I use Exescope an old 32-bit utility, here's screenshot
I like your programs ability to work with both 32 and 64 files, but for a naive user as myself it would be nice to have something like the above, to easily see the dependencies and the exported names.

Vortex

Hi Jack,

Attached is a screenshot viewing the functions exported by kernel32.lib

Code it... That's all...